conn->trust is guaranteed to be false.